Anti-Spam Options - Spambot Stopper - Prevent Spambots from Registering

What is it?
----------------------------
This mod rejects registrations where the form is filled out in less than a minimum time. You can configure one of the following actions to be taken when an automated registration is detected:

- Show a "No Permissions" page
- Display the "Successful Registration" message but without creating an account
- Redirect the user to any URL you choose
- Reload the registration page with an error message of your choosing

You can also provide a list of email addresses to be notified each time a registration is blocked.

Added for version 1.1.1: Time delay enforcer, maximum time option, time limits to cut down on email notifications, posting to a thread.

In the future, I'd like to add some simple logging and statistics, and a summary type of email notification (because people seem to quickly get tired of the single emails).

Note: I coded this myself from scratch, but I would like to acknowledge a couple of previous mods that used this same idea, by users Calorie and noppid, and maybe others. In any case, I believe this one adds some features that the others don't have.

Other advantages: no ads or links, no abuse of update notifications, no disappearing features, no threats to delete the mod (it will never be deleted, at least by me). Also, translations are allowed.

Installation:
----------------------------
1) If you have "Is Bot", "Stop the Registration Bots", "Spammers Suck!", or another mod that works on registration time, note any admincp settings for that mod then uninstall it.

2) Import the product XML file from the Product Manager.

3) Go to Settings > Options > Spambot Stopper Options and configure the desired settings.

4) IMPORTANT: try to register a new user to make sure that there are no problems with humans registering. If you want, you can also temporarily set the minimum time to a higher value (like 60 seconds) and test to see if the spammer rejection is working.



History:
----------------------------
1.1.1 (Feb 16, 2013)

• Added timer for enforcing minimum time
• Added maximum registration time limit
• Added time limits for email notifications
• Added posting notificatiosn to a thread

1.0.1 (Feb 01, 2013)

• Fixed bug
• Added check for fake timestamps

1.0 (Jan 31, 2013)

• Initial Release

[kh99]

Originally Posted by gullim

It would be nice, if it is possible that only every day/week/month a post is created with a detailed statistic of blocked users or like its done as shown in the screenshot

Yes, I think most everyone who has a serious spammer problem ends up turning on the notices only to see if it works, then turns them off. But I'm already working on a version that will be able to show statistics. It's a little more complicated because with notices the mod can just send a notice and it's done, but with stats it needs to save information to the database.

[Steve-Hoog]

Do you suggest using PCRE with this or no?

[kh99]

Originally Posted by Steve-Hoog

Do you suggest using PCRE with this or no?

Sorry, I don't know what you mean. Are you talking about having a field match a certain pattern?

[Steve-Hoog]

This in the vB standard registration.

You may require the username to match a regular expression (PCRE). The admin help provides some examples that may be useful. To disable this function leave the option blank.

[kh99]

Originally Posted by Steve-Hoog

This in the vB standard registration.

Oh, OK. Well, it's up to you if you want to use that to control what usernames are allowed. If you were using it to somehow filter out spammers then yes, there's no reason you shouldn't continue to use it. This mod attempts to filter out bots by the amount of time taken to fill out the form, so it shouldn't be affected by that setting.

[Steve-Hoog]

I don't know how the Bots get past the PCRE thing but they do. My thought was maybe that added to the time for them to register and I should take it off to keep the Bot in your suggested time frame of 20 seconds.

I'll try both ways, right now just waiting for my first notification of your mod stopping one. After I see it works and what not I'll hook you up with a little thank you

[kh99]

Originally Posted by Steve-Hoog

I don't know how the Bots get past the PCRE thing but they do.

When you say they're "getting past the PCRE thing", you mean before this mod was installed, right? (Or are you saying this mod was somehow letting them past)? Those patterns can be a little tricky, maybe the one you're using isn't quite right or something.

My thought was maybe that added to the time for them to register and I should take it off to keep the Bot in your suggested time frame of 20 seconds.

It shouldn't make any difference. I guess when a user fills out the form it does a call back to the server to check the name, but a bot would bypass that.

[Steve-Hoog]

That PCRE thing is the deal where you have to read two words printed out blurry and what not then type them in to continue; and yes the BOTs go right past this outside your Hack. They have to scam them somehow; which must take an extra second or two.

I just installed 10 minutes ago and haven't got and email from your Hack or a post in a designated thread; yet. We usally have 20 to 50 Bots and hour; so I'm wondering if your Hack is stopping them and I'm not getting notified. I'll wait a bit longer and then maybe try a test or two.

I have the PCRE thing off to start with on your Hack.

[kh99]

Originally Posted by Steve-Hoog

That PCRE thing is the deal where you have to read two words printed out blurry and what not then type them in to continue; and yes the BOTs go right past this outside your Hack. They have to scam them somehow; which must take an extra second or two.

This sounds like you're talking about ReCAPTCHA, which is something different than the PCRE thing. But yes, bots will get by reCAPTCHA. To answer your original question, you can use that in addition to this mod, but you really should use "question and answer" human verification with some simple questions instead of reCAPTCHA.

I just installed 10 minutes ago and haven't got and email from your Hack or a post in a designated thread; yet. We usally have 20 to 50 Bots and hour; so I'm wondering if your Hack is stopping them and I'm not getting notified. I'll wait a bit longer and then maybe try a test or two.

That does sound like maybe something's wrong. It would be a good idea to do a test registration.

[Steve-Hoog]

I'm on vB 4.1.4 I see nothing about ReCAPTCHA in User Registration Options, just this PCRE thing under Username Regular Expression.

I am certain now your Hack is blocking, but I'm getting no notifications. I fiddle with it and look around at other areas.